CVE-2023-49463

CVE-2023-49463 affects libheif v1.17.5, with a segmentation fault in find_exif_tag (libheif/exif.cc). Public records (NVD) rate the impact as high (CVSS v3.1: AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H; base score 8.8). Several connected advisories reference the same issue alongside other libheif CVEs (...

CVE-2023-49464

CVE-2023-49464 affects libheif, specifically libheif v1.17.5, with a segmentation fault arising from UncompressedImageCodec::get_luma_bits_per_pixel_from_configuration_unci. The CVE is listed across multiple advisories (Mageia, OpenVAS/USN feeds, Ubuntu USN) as part of a set of libheif issues, al...

CVE-2023-49462

libheif v1.17.5 was discovered to contain a segmentation violation via the component /libheif/exif.cc...

CVE-2023-49463

libheif v1.17.5 was discovered to contain a segmentation violation via the function findexiftag at /libheif/exif.cc...

CVE-2023-49463

libheif v1.17.5 was discovered to contain a segmentation violation via the function findexiftag at /libheif/exif.cc...

CVE-2023-49462

libheif v1.17.5 was discovered to contain a segmentation violation via the component /libheif/exif.cc...

CVE-2023-49462

CVE-2023-49462 affects libheif 1.17.5, with a segmentation fault in /libheif/exif.cc. The issue can cause instability and, per related advisories, may lead to denial of service; some sources imply potential for broader impact. Affected ecosystems cite multiple vendors (Debian, Mageia, Ubuntu, etc...

CVE-2023-49462

libheif v1.17.5 was discovered to contain a segmentation violation via the component /libheif/exif.cc...

CVE-2023-49464

libheif v1.17.5 was discovered to contain a segmentation violation via the function UncompressedImageCodec::getlumabitsperpixelfromconfigurationunci...

CVE-2023-49462

libheif v1.17.5 was discovered to contain a segmentation violation via the component /libheif/exif.cc...

CVE-2023-49460

libheif v1.17.5 was discovered to contain a segmentation violation via the function UncompressedImageCodec::decodeuncompressedimage...

PT-2023-35970 · Git +1 · Libheif

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: A heap-buffer-overflow READ 4 crash has been reported. The crash occurs in the HeifContext::interpret heif file function, which calls HeifContext::read...

SUSE SLED15: gdk-pixbuf-loader-libheif / libheif-devel / libheif1 / etc (SUSE-SU-2023:2223-2)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2023:2223-2 advisory. - CVE-2023-29659: Fixed segfault caused by divide-by-zero bsc1211174. Tenable has extracted the preceding...

SUSE-SU-2023:2223-2 Security update for libheif

This update for libheif fixes the following issues: - CVE-2023-29659: Fixed segfault caused by divide-by-zero bsc1211174...

The vulnerability of the heif::Fraction::round() function in the box.cc file decoder for HEIF and AVIF formats in the libheif library allows a malicious actor to cause service interruptions.

The vulnerability of the heif::Fraction::round function in the box.cc file format decoders for HEIF and AVIF formats in the libheif library is related to a floating-point exception. Exploiting this vulnerability could allow an attacker to cause service failures...

ROS-20230615-03

A vulnerability in the HEIF and AVIF libheif file format decoder is related to a floating point exception in the heif::Fraction::round function in box.cc Exploitation of the vulnerability could allow an attacker, remotely to perform a denial of service attack...

SUSE SLED15: gdk-pixbuf-loader-libheif / libheif-devel / libheif1 / etc (SUSE-SU-2023:2223-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2023:2223-1 advisory. - CVE-2023-29659: Fixed segfault caused by divide-by-zero bsc1211174. Tenable has extracted the preceding...

SUSE-SU-2023:2223-1 Security update for libheif

This update for libheif fixes the following issues: - CVE-2023-29659: Fixed segfault caused by divide-by-zero bsc1211174...

Denial Of Services (DoS)

libheif.so is vulnerable to Denial Of Services DoS. The vulnerability exists due to the segmentation fault in the Fraction function of box.cc, allowing an attacker to cause an application crash through the floating point exception by providing maliciously crafted heif images...

SUSE CVE-2023-29659

A Segmentation fault caused by a floating point exception exists in libheif 1.15.1 using crafted heif images via the heif::Fraction::round function in box.cc, which causes a denial of service...